Discord Connect UI

Provides full Discord bot integration with automatic UI tab installation, bot setup wizard, token management, server monitoring, and dashboard controls for C...

Security Scan

The skill's code, install script, and documentation are internally consistent with a Clawdbot Discord integration plugin, but it modifies local Clawdbot source, runs builds/restarts, and reads environment paths — so proceed with caution and review before installing.

Purpose & Capability

The name/description (Discord integration + dashboard UI) matches the provided files: backend RPC handlers, UI view code, install hooks, health checks, and test-token utilities. The package.json declares the same capabilities (ui tabs, RPC methods, channelType) and the scripts implement them (install-plugin.js copies backend/UI code and registers handlers). Nothing in the repository appears unrelated to providing Discord connectivity and a Control dashboard tab.

Instruction Scope

SKILL.md and scripts instruct the agent to modify the Clawdbot source tree (add server-methods, views, navigation entries), write configuration (bot token), run builds, and restart the gateway. Those actions are expected for an install-time plugin. The install script reads environment variables (CLAWDBOT_PATH, HOME) to locate the gateway and performs in-place search/replace edits using regex; this is brittle and could accidentally alter unrelated code if the target files differ. The runtime instructions do not attempt to read or exfiltrate unrelated system files or external endpoints outside Discord's API.

Install Mechanism

There is no external download/install URL — the skill is instruction-only with local install scripts. The installer uses local file copy and programmatic edits, then runs pnpm build and 'clawdbot gateway restart' via child_process.execSync. No remote archives or URL-shortened downloads are used, which lowers supply-chain risk, but running build and restart commands gives the installer operating-level effects on the host.

Credentials

The skill logically needs a Discord bot token (declared in config-schema and requested by SKILL.md) and access to the Clawdbot source tree. Registry metadata lists no required env vars, but the install script reads CLAWDBOT_PATH and HOME to locate the gateway; this is reasonable for auto-detection but should be noted. The skill does not request unrelated credentials or cloud keys. OpenBao/vault references are supported in the config schema (bao:...); the code reads/writes the local Clawdbot config (ctx.serverState.config) and expects tokens to be supplied via configuration or a vault reference.

Persistence & Privilege

The skill modifies Clawdbot source files, updates navigation and server-methods, triggers builds, and attempts to restart the gateway. These are high-privilege, persistent changes to the local project, but they are coherent with the skill's purpose. always:false and normal autonomous invocation settings are appropriate. The installer claims to create backups in package metadata, but the visible install code does not show explicit backup creation in the excerpt — verify that backups are actually created before modifying your source.

Assessment

This package appears to be a genuine Discord integration for Clawdbot, but it will change your local Clawdbot source, run builds, and restart the gateway. Before installing: 1) Backup your Clawdbot repository (or test in a clone/dev environment). 2) Inspect scripts/install-plugin.js fully to confirm it creates backups and that the search/replace logic matches your codebase (the script uses regex edits that can be brittle). 3) Run the installer in --dry-run first to see intended changes. 4) Don't run as root; ensure the install runs with the same user that owns the repo. 5) Confirm how tokens are stored in your environment (use OpenBao/vault references if available rather than plaintext config). 6) If you rely on a production gateway, schedule downtime — the installer will attempt to run pnpm build and restart the gateway. If you want more confidence, provide the truncated parts of the backend and install/uninstall code (the setToken/save and uninstall logic) so they can be reviewed for any accidental data leakage or missing backup behavior.

Discord Connect Hub

Complete Discord integration for Clawdbot with automatic UI installation. This skill provides everything needed for Discord bot connectivity including:

• Discord Channel Plugin - Full Discord bot integration for messaging
• Dashboard UI Tab - Web interface for setup and monitoring
• Setup Wizard - Step-by-step bot creation and configuration
• Credential Management - Secure token storage (OpenBao support)
• Server Monitoring - Health checks and guild management
• Plugin Architecture Hooks - Automatic installation of UI components

Installation

This skill automatically installs all necessary components:

# Install via agent
Install the discord-connect-hub skill from ClawHub

The skill will automatically:

1. Install Discord channel plugin if not present
2. Add Discord tab to the Control dashboard
3. Register RPC handlers for Discord management
4. Set up navigation and routing
5. Install UI components and views

Features

Discord Bot Integration

• Full Discord.js bot implementation
• Message sending/receiving with formatting preservation
• Reaction handling and emoji support
• File attachment support
• Slash command integration
• Member and guild management

Dashboard UI

• Connection Status - Real-time bot status and health
• Setup Wizard - Interactive bot creation guide
• Server Management - View guilds, channels, and permissions
• Invite Generator - Create bot invite URLs
• Health Diagnostics - Automatic troubleshooting
• Token Management - Secure credential storage

Plugin Architecture Integration

• Automatic UI tab installation
• Dynamic navigation updates
• RPC method registration
• Configuration management
• Restart orchestration

Quick Setup

1. Discord Application Setup

1. Go to discord.com/developers/applications
2. Create New Application → Enter name → Create
3. Go to Bot tab → Reset Token → Copy token
4. Enable Message Content Intent ✅

2. Bot Permissions

Go to OAuth2 → URL Generator:

• Scopes: bot + applications.commands
• Permissions: Send Messages, Read History, Reactions, Embeds, Files, Slash Commands
• Copy invite URL → Open in browser → Authorize

3. Configure in Clawdbot

Option A: Dashboard (Recommended)

1. Open Control Dashboard → Channels → Discord
2. Paste bot token → Save & Connect

Option B: Config File

channels:
  discord:
    botToken: "YOUR_BOT_TOKEN"
    # Or with OpenBao:
    # botToken: "bao:channels/discord#bot_token"

Plugin Architecture Hooks

This skill includes hooks for the Clawdbot plugin architecture:

Installation Hooks

• install/navigation.js - Adds Discord tab to dashboard
• install/rpc-handlers.js - Registers Discord RPC methods
• install/ui-components.js - Installs UI views and templates
• install/config-defaults.js - Sets up default configuration

Runtime Hooks

• hooks/post-install.js - Post-installation setup and verification
• hooks/pre-uninstall.js - Cleanup before removal
• hooks/config-updated.js - Responds to configuration changes

Capabilities Registration

The skill declares its capabilities for the plugin system:

• UI Tabs: discord tab with navigation and routing
• RPC Methods: Discord API interaction endpoints
• Channel Type: discord messaging channel
• Config Schema: Discord channel configuration

RPC Methods

Method	Description
discord.status	Get bot connection status and user info
discord.health	Run comprehensive health checks
discord.guilds	List connected Discord servers
discord.guild	Get detailed server information
discord.channels	List channels in a server
discord.invite	Generate bot invite URLs
discord.testToken	Validate token without saving
discord.setToken	Store and activate bot token
discord.permissions	Check bot permissions

Configuration Options

channels:
  discord:
    # Required
    botToken: "YOUR_BOT_TOKEN"
    
    # Guild restrictions (optional)
    guilds:
      "SERVER_ID":
        enabled: true
        channels:
          "CHANNEL_ID":
            enabled: true
            requireMention: false
    
    # Global behavior
    requireMention: true        # Require @mention in servers
    dmPolicy: "pairing"         # DM handling: pairing|open|closed
    groupPolicy: "open"         # Server handling: open|mention|closed
    
    # Advanced options
    retryAttempts: 3
    heartbeatInterval: 30000
    reconnectDelay: 5000

Security Features

• Token Protection - Never exposes full tokens in API responses
• OpenBao Integration - Vault-based credential storage
• Scoped Permissions - Requests only necessary bot permissions
• Input Validation - Sanitizes all Discord API inputs
• Rate Limiting - Respects Discord API limits
• HTTPS Enforcement - Secure token transmission

Health Checks

Automatic diagnostics include:

• ✅ Token Validity - Bot token authentication
• ✅ Gateway Connection - Discord WebSocket status
• ✅ Message Intent - Required intent enablement
• ✅ Bot Permissions - Guild-level permission verification
• ✅ Channel Access - Read/write permission checks
• ✅ API Rate Limits - Current usage and limits

Troubleshooting

Common Issues

"Invalid token" errors:

• Ensure you're using a bot token (not user token)
• Verify the token was copied completely
• Try resetting the token in Developer Portal

Bot not responding in channels:

• Check Message Content Intent is enabled
• Verify bot has permissions in the channel
• Check requireMention setting (try @mentioning)

Dashboard not loading:

• Verify UI installation completed successfully
• Check browser console for errors
• Restart gateway: clawdbot gateway restart

Log Analysis

# Check Discord connection logs
clawdbot logs | grep discord

# Test token independently
python scripts/test-token.py YOUR_TOKEN

Files Structure

discord-connect-hub/
├── SKILL.md                 # This skill guide
├── scripts/
│   ├── test-token.py       # Token validation utility
│   ├── install-plugin.js   # Plugin installation script
│   └── health-check.py     # Diagnostic tool
├── references/
│   ├── discord-api.md      # Discord API documentation
│   ├── bot-setup.md        # Detailed setup guide
│   └── troubleshooting.md  # Extended troubleshooting
└── assets/
    ├── discord-backend.ts   # RPC handler implementation
    ├── discord-views.ts     # UI component templates
    ├── navigation-hooks.js  # Navigation registration
    ├── install-hooks.js     # Installation automation
    └── config-schema.json   # Configuration validation

Plugin Integration Details

Automatic Installation Process

1. Detect Environment - Check if Clawdbot source is available
2. Install Backend - Copy RPC handlers to gateway
3. Register Handlers - Add method registration to server
4. Install UI Components - Copy views and templates
5. Update Navigation - Add Discord tab to dashboard
6. Configure Routes - Set up URL routing for tab
7. Build & Restart - Compile changes and restart gateway

Manual Installation Fallback

If automatic installation isn't possible, the skill provides detailed manual instructions similar to the original discord-connect skill.

Compatibility

• Clawdbot: >=2026.1.0
• Node.js: >=18.0.0
• Discord.js: >=14.0.0
• Plugin Architecture: v2+

Links

• Discord Developer Portal
• Bot Permissions Calculator
• Clawdbot Discord
• ClawHub Repository